Controller and method for administering and providing on-line correction of a batch sterilization process

ABSTRACT

The present invention comprises a batch sterilization system, a controller for use in the batch sterilization system, and a method performed by the controller. The system, controller, and method are used to administer and provide on-line correction of a batch sterilization process performed on a batch of containers. The controller compiles an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures sensed by a sensor. While this is occurring, the controller controls a batch sterilizer so as to administer an initial portion of the batch sterilization process before a temperature deviation has begun according to a scheduled time-temperature profile. This temperature deviation is between the actual retort time-temperature profile and the scheduled processing time-temperature profile. In response to the temperature deviation, the controller defines a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation clears. This is done by simulating the batch sterilization process based on the actual retort time-temperature profile. During the temperature deviation, the controller controls the batch sterilizer so as to administer corrections to clear the temperature deviation between the actual retort and re-scheduled remaining time-temperature profiles. When the temperature deviation has finally cleared, the controller controls the batch sterilizer so as to administer the remaining portion of the batch sterilization process according to the re-scheduled remaining time-temperature profile.

TECHNICAL FIELD OF THE INVENTION

[0001] The present invention relates generally to controllers for administering batch sterilization processes. In particular, it pertains to such a controller that provides on-line correction of a batch sterilization process when a temperature deviation occurs during the process.

BACKGROUND OF THE INVENTION

[0002] Batch sterilization systems are widely used to sterilize shelf stable food products packaged in containers. In a typical batch sterilization system, a batch of these containers is placed inside the batch sterilizer of the system. Then, the controller of the system administers the batch sterilization process that is performed by the batch sterilizer on the batch of containers.

[0003] The batch sterilization process has come-up, processing, and cooling phases. These phases deliver a total lethality F to the batch of containers over a total time interval [t₀, t_(c)] covering these phases, where t₀ is the begin time of the come-up phase and t_(c) is the end time of the cooling phase. For purposes of this document, an open bracket [or] indicates that the corresponding time is included in the time interval while a closed bracket ( or ) indicates that the corresponding time is not included in the time interval. In order for the food product in the batch to be commercially sterilized, the total lethality actually delivered must satisfy a predefined target total lethality F_(targtot) for the food product. The target total lethality may be set by the USDA (U.S. Department of Agriculture), the FDA (Food and Drug Administration), and/or a suitable food processing authority. Furthermore, some batch sterilization systems also include an optional requirement that the come-up and processing phases must deliver a heating lethality F to the batch over a heating time interval [t₀, t_(p)] that meets a predefined target heating lethality F_(targh) for the food product, where t_(p) is the end time of the processing phase. In this case, the operator sets the target heating lethality on an individual basis for each batch sterilization process.

[0004] As is well known, the lethality F delivered to the batch over a particular time interval [t_(m), t_(k)] is given by the lethality equation: Fo = ∫_(t_(m))^(t_(k))10^((T_(CS)(t) − T_(REF))/z)t

[0005] where t_(m) and t_(k) are respectively the begin and end times of the time interval [t_(m), t_(k)], T_(cs)(t) is the product cold spot time-temperature profile of a container in the batch, z is the thermal characteristic of a particular microorganism to be destroyed in the sterilization process, and T_(REF) is a reference temperature for destroying the organism. Thus, the heating lethality F delivered over the heating time interval [t₀, t_(p)]is given by this lethality equation, where t_(m)=t₀ and t_(k)=t_(p). Similarly, the total lethality F delivered to the product cold spot over the total time interval [t₀, t_(c)] is also given by the lethality equation, but where t_(k)=t_(c).

[0006] The time intervals [t₀, t_(p)] and [t₀, t_(c)] and the product cold spot time-time-temperature profile T_(cs)(t) must be such that the target lethalities F_(targh) and F_(targtot) are met by the heating and total lethalities F over [t₀, t_(p)] and F over [t₀, t_(c)]. In order to ensure that this occurs, various mathematical simulation models have been developed for simulating the product cold spot time-time-temperature profile T_(cs)(t) over the come-up, processing, and cooling phases. These models include those described in Ball, C.O. and Olson, F.C.W., Sterilization in Food Technology; Theory, Practice and Calculations, McGraw-Hill Book Company, Inc., 1957; Hayakawa, K., Experimental Formulas for Accurate Estimation of Transient Temperature of Food and Their Application to thermal Process Evaluation, Food Technology, vol. 24, no. 12, pp. 89 to 99, 1970; Thermobacteriology in Food Processing, Academic Press, New York, 1965; Teixeira, A. A., Innovative Heat Transfer Models: From Research Lab to On-Line Implementation in Food Processing Automation II, ASAE, p. 177-184, 1992; Lanoiselle, J. L., Candau, Y., and Debray E., Predicting Internal Temperatures of Canned Foods During Thermal Processing Using a Linear Recursive Model, J Food Sci., Vol. 60, No. 4, 1995; Teixeira, A. A., Dixon, J. R., Zahradnik, J. W., and Zinsmeister, G. E., Computer Optimization of Nutrient Retention in Thermal Processing of Conduction Heated Foods, Food Technology, 23:137-142, 1969; Kan-Ichi Hayakawa, Estimating Food Temperatures During Various Processing or Handling Treatments, J. of Food Science, 36:378-385, 1971; Manson, J. E., Zahradnik, J. W., and Stumbo, C. R., Evaluation of Lethality and Nutrient Retentions of Conduction-Heating Foods in Rectangular Containers, Food Technology, 24(11):109-113, 1970; Noronha, J., Hendrickx, M., Van Loeg, A., and Tobback, P., New Semi-empirical Approach to Handle Time-Variable Boundary Conditions During Sterilization of Non-Conductive Heating Foods, J. Food Eng., 24:249-268, 1995; and the NumeriCAL model developed by Dr. John Manson of CALWEST Technologies, licensed to FMC Corporation, and used in FMC Corporation's LOG-TEC controller. A number of approaches have been developed for using these models to meet the target lethalities F_(targh) and F_(targtot).

[0007] Referring to FIG. 1, a conventional approach is to use such a simulation model only for off-line (i.e., prior to administering the batch sterilization process) definition of a scheduled total time-temperature profile T_(sRT)(t)⁰ for the batch sterilization process. In this approach, the controller of the batch sterilization system uses the simulation model to simulate a scheduled product cold spot time-temperature profile T_(cs)(t)⁰ that is predicted to occur over the come-up, processing, and cooling phases. This simulation is based on a pre-defined come-up time-temperature gradient T_(uRT)(t), a scheduled processing retort temperature T_(pRT) ⁰, and a pre-defined cooling time-temperature gradient T_(cRT)(t). The gradients T_(uRT)(t) and T_(cRT)(t) are based on heating and cooling temperature distribution tests conducted on the batch sterilizer and may include segments defined by endpoint temperatures and time durations.

[0008] The lethality equation described earlier is then used, where t_(m)=t₀ and t_(k)=t_(p) ⁰, F=F⁰, and T_(CS)(t)=T_(CS)(t)⁰, to compute a heating lethality F⁰ that is predicted to be delivered over a scheduled heating time interval [t₀, t_(p) ⁰] and is based on the scheduled product cold spot time-temperature profile T_(CS)(t)⁰. Similarly, a total lethality F⁰ that is predicted to be delivered over a scheduled total time interval [t₀, t_(c) ⁰] is computed based on the profile T_(CS)(t)⁰ using the lethality equation, except where t_(k)=t_(c) ⁰. As alluded to earlier, this is done so that the heating and total lethalities will meet the target lethalities F_(targh) and F_(targtot).

[0009] By simulating the scheduled product cold spot time-temperature profile T_(CS)(t)⁰ and computing the scheduled heating and total lethalities F⁰ over [t₀, t_(p) ⁰] and F⁰ over [t₀, t_(c) ⁰] in this way, the controller defines the scheduled total time-temperature profile T_(sRT)(t)⁰ for which the target lethalities F_(targh) and F_(targtot) are satisfied. This profile T_(sRT)(t)₀ includes come-up, processing, and cooling portions over scheduled come-up, processing, and cooling time intervals [t₀, t_(u) ⁰], (t_(p) ⁰, t_(c) ⁰], (t_(p) ⁰, t_(c) ⁰], respectively. The come-up and cooling portions comprise the portions of the gradients T_(uRT)(t) and T_(cRT)(t) over the corresponding scheduled come-up and cooling time intervals [t₀, t_(u) ⁰] and (t_(p) ⁰, t_(c) ⁰], respectively. Similarly, the processing portion comprises the constant scheduled processing retort temperature T_(pRT) ⁰ over the scheduled processing time interval (t_(u) ⁰, t_(p) ^(0 ].)

[0010] Moreover, some of the simulation models, such as the earlier mentioned NumeriCAL model and the models described in the Teixeira et al., 1969 and Manson et al., 1970 references use finite differencing. In this case, the scheduled product cold spot time-temperature profile T_(CS)(t)⁰ and the predicted heating and total lethalities F⁰ over [t₀, t_(p) ⁰] and F⁰ over [t₀, t_(c) ⁰] are incrementally and iteratively simulated and computed.

[0011] The controller then administers the batch sterilization process to be performed by the batch sterilizer according to the scheduled total time-temperature profile T_(sRT)(t)⁰. However, a temperature deviation may occur during the processing phase. This occurs when the actual retort temperature T_(aRT)(t_(r)) at each real sampling time t_(r) during a deviation time interval [t_(d), t_(e)) is below the scheduled processing temperature T_(pRT) ⁰. In this case, the heating and total lethalities F⁰ over [t₀, t_(p) ⁰] and F⁰ over [t₀, t_(c) ⁰] will in fact be less than the target lethalities F_(targh) and F_(targtot).

[0012] In a conventional off-line scheduling approach, the controller has no means for on-line scheduling correction if a temperature deviation occurs. Thus, when such a deviation does occur, the operator is left with several undesirable options. The first option is to discard the batch entirely. However, this is wasteful and not necessary. The second option is to re-process the batch. This, however, will cause the food product in the batch to be over processed. And, the third option is to post process the recorded actual retort time-temperature profile T_(aRT)(t) to determine whether the target lethalities F_(targh) and F_(targtot) have been satisfied. If they have not been satisfied, then the batch will be discarded or re-processed. If they have been satisfied, then the batch can be released for distribution. However, this is time consuming and, like the other options, wasteful and damaging to the food product.

[0013] In another approach, the controllers of the batch sterilization system is provided with conservative on-line scheduling correction capabilities. An example of such an approach is found in FMC Corporation's LOG-TEC controller which uses the NumeriCAL model mentioned earlier. Referring to FIG. 2, this controller computes a scheduled total time-temperature profile T_(sRT)(t)⁰ off-line using the model in the manner just described. And, while still off line, the controller also uses the model to generate a correction table of re-scheduled remaining time-temperature profiles T_(sRT)(t)¹, T_(sRT)(t)², etc. This table is then used for on-line correction of the scheduled total time-temperature profile T_(sRT)(t)⁰ in case a temperature deviation does occur during the processing phase.

[0014] In generating the correction table, the controller selects a re-scheduled processing retort temperature T_(pRT) ¹ that is below the scheduled processing retort temperature T_(pRT) ⁰. The controller then defines a corresponding re-scheduled remaining time-temperature profile T_(sRT)(t)¹ over a re-scheduled remaining time interval [t_(u) ¹, t_(c) ¹]. The re-scheduled remaining time interval comprises re-scheduled heating and cooling time intervals [t₀, t_(p) ¹] and [t₀, t_(c) ¹]. This is done in a similar manner to that just described. Thus, a product cold spot time-temperature profile T_(CS)(t)¹ is simulated that is based on the re-scheduled processing retort temperature T_(pRT) ¹. From this product cold spot time-temperature profile, heating and cooling lethalities F¹ over [t₀, t_(p) ¹] and F¹ over [t₀, t_(c) ¹] are computed that satisfy the target heating and total lethalities F_(targh) and F_(targtot) and are predicted to be delivered over the re-scheduled heating and cooling time intervals. This entire process is then repeated for other re-scheduled processing retort temperature T_(pRT) ², etc. to complete the correction table.

[0015] Then, if a temperature deviation occurs during the processing phase, the controller records the minimum actual retort temperature T_(aRT)(t_(min)) at a particular sampling time t_(min) during the deviation time interval [t_(d), t_(e)). The controller then locates the closest re-scheduled processing retort temperature T_(pRT) ¹ in the correction table that is equal to or just below the retort temperature T_(aRT)(t_(min)). The remainder of the processing phase is administered according to the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ over the re-scheduled remaining time interval [t_(u) ¹, t_(c) ¹].

[0016] However, this approach can still cause the food product to be over processed. This is due to the use of the minimum actual retort temperature T_(aRT)(t_(min)) during the temperature deviation for simulating the product cold spot time-temperature profile T_(CS)(t)¹. This simulation is overly conservative in that it disregards the fact that the actual retort time-temperature profile T_(aRT)(t) was above the scheduled processing retort temperature T_(pRT) over the time interval [t₀, t_(d)) before the temperature deviation occurred. In other words, the portion of this product cold spot time-temperature profile over this time interval is overly 1 0 conservative.

[0017] This means that, in the computation of the heating and total lethalities F¹ over [t₀, t_(p) ¹] and F¹ over [t₀, t_(c) ¹], full credit is not given to the lethality F that was actually delivered to the product cold spot of the batch over the time interval [t₀, t_(d)) prior to the temperature deviation. As a result, the re-scheduled heating and total time intervals [t₀, t_(p) ¹] and [t₀, t_(c) ¹] are overly conservative since they are based on the overly conservative product cold spot time-temperature profile T_(CS)(t)¹. The food product in the batch will therefore be over processed since the heating and total lethalities actually delivered to the batch will substantially surpass the target lethalities F_(targh) and F_(targtot), respectively.

[0018] Another disadvantage of this approach is that the minimum actual retort temperature T_(aRT)(t_(min)) during the temperature deviation may be lower than any of the re-scheduled processing retort temperatures T_(pRT) ¹, T_(pRT) ², etc. in the correction table. In this case, the on-line scheduling correction just described will not be available. The operator of the batch sterilization system will then be only left with the options described earlier for the off-line scheduling approach.

[0019] In view of this, a new approach has been recently developed for on-line definition of the heating and total time intervals [t₀, t_(p)] and (t_(p), t_(c)] using a finite difference simulation model. This approach is described in Teixeira, A. A. and Tucker, G. S., On-Line Retort Control in Thermal Sterilization of Canned Foods, Food Control, 8(3):13-20, 1997; Simpson, R., Almonacid S., and Torres, J.A., Computer Control of Batch Retort Process Operations, Food Processing Automation I, ASAE, 1991; Teixeira, A. A. and Manson, J. E., Computer Control of Batch Retort Operations with On-Line Correction of Process Deviations, Food Technology, p. 85-90, April 1982; and Datta, A. K., Teixeira, A. A., and Manson, J. E., Computer-based Retort Control Logic for On-Line Correction of Process Deviations, J. Food Sci., 51(2):480-483 and 507, 1986. This approach will also be discussed next to provide a better understanding of the differences between this approach and the approach used in the invention disclosed herein.

[0020] Referring to FIG. 3, in the on-line definition approach, the controller causes the batch sterilization process to begin without defining a scheduled total time-temperature profile T_(sRT)(t)⁰ or a correction table. The come-up and processing phases are administered according to the pre-defined come-up time-temperature gradient T_(uRT)(t) and the scheduled processing retort temperature T_(pRT). While these phases are being administered, the controller simulates for each current real sampling time t_(r) the portion of a product cold spot time-temperature profile T_(CS)(t) that has actually occurred over the time interval [t₀, t_(r)]. This is done based on the actual retort temperature T_(aRT)(t_(r)) measured at each real sampling time t_(r) of the processing phase. From this portion of the cold spot time-temperature profile, the controller computes the heating lethality F actually delivered to the batch over the time interval [t₀, t_(r)] . This is done on-line at each real sampling time t_(r) of the come-up and processing phases according to the lethality equation described earlier, where t_(m)=t₀ and t_(k)=t_(r). The controller then determines whether this heating lethality satisfies the target heating lethality F_(targh). If it does not, then the process is repeated for the next real sampling time t_(r)+Δt_(r), where Δt_(r) is a pre-defined sampling period.

[0021] If the target heating lethality F_(targh) is satisfied, then the controller uses the simulation model to simulate the portion of the product cold spot time-temperature profile T_(CS)(t) that is predicted to occur over the cooling phase beginning at the current real sampling time t_(r). This is done while the controller is still on-line at the time t_(r). In doing so, the controller first defines a predicted cooling time-temperature profile T_(sRT)(t) by shifting the cooling time-temperature gradient T_(cRT)(t) so that it starts at the actual retort temperature T_(aRT)(t_(r)) at the time t_(r) and occurs over a predicted cooling time interval [t_(r),t_(r)+Δt_(c)], where Δt_(c) is the time duration of the predicted cooling time-temperature profile.

[0022] Moreover, while still on-line at the current real sampling time t_(r), the controller computes a total lethality F predicted to be delivered over a predicted total time interval [t₀,t_(r)+Δt_(c)]. This is done by computing a cooling lethality F predicted to be delivered to the batch over the predicted cooling time interval [t_(r), t_(r)+Δt_(c) and adding it to the actually delivered heating lethality F over [t₀, t_(r)]. The predicted cooling lethality is computed according to the lethality equation, where t_(m)=t_(r) and t_(k)=t_(r)+Δt_(c), by using the portion of the product cold spot time-temperature profile T_(CS)(t) predicted to occur over the time interval [t_(r), t_(r)+Δt_(c)]. If the predicted total lethality does not satisfy the target total lethality F_(targtot), then the controller repeats the entire process for the next real sampling time t_(r)+Δt_(r).

[0023] If the target total lethality F_(targtot) is satisfied, then the controller defines the time t_(r) as the actual processing end time t_(p) and the time t_(r)+Δt_(c) as the scheduled cooling end time t_(c). This means that the processing phase was administered over the actual processing time interval (_(tu), t_(p)]. The controller then administers the cooling phase according to the now scheduled cooling time-temperature profile T_(sRT)(t) over the correspondingly scheduled cooling time interval (t_(p), t_(c)].

[0024] As discussed earlier, the on-line definition approach just described requires use of a finite difference simulation model. Such a model is required to accurately simulate the portion of the product cold spot time-temperature profile T_(CS)(t) that actually occurs over each real time increment [t_(r)−Δt_(r), t_(r)] of the processing phase using the actual retort temperature T_(aRT)(t_(r)) measured at the real sampling time t_(r). And, similar to the other approaches already described, this model can also be used to accurately simulate the portion of the product cold spot time-temperature profile T_(CS)(t) predicted to occur over each simulation time increment [t_(s)−Δt_(r), t_(s)] of the cooling phase using the cooling retort temperature T_(cRT)(t_(s)) at the simulation sampling time t_(s).

[0025] A disadvantage to this on-line definition approach is that the definition of the processing and cooling end times t_(p) and t_(c) is open ended. In other words, the operator and the controller do not know the end times t_(p) and t_(p) in advance. This makes it difficult for an operator to comply with current FDA and/or USDA regulatory requirements in filing the batch sterilization process with the FDA and/or USDA.

[0026] Another disadvantage of this approach is that the product cold spot temperature profile T_(CS)(t) must be simulated over each real time increment [t_(r−Δt) _(r), t_(r)] and the heating lethality F over the time interval [t₀, t_(r)] must be computed at each sample time t_(r) of the processing phase. This makes the approach computationally intensive and difficult to implement.

SUMMARY OF THE INVENTION

[0027] In summary, the present invention comprises a batch sterilization system, a controller for use in the batch sterilization system, and a method performed by the controller. The system, controller, and method are used to control and provide on-line correction of a batch sterilization process performed on a batch of containers. In addition to the controller, the batch sterilization system includes a batch sterilizer to perform the batch sterilization process on the batch of containers. The system also includes a sensor to sense actual retort temperatures in the batch sterilizer during the batch sterilization process.

[0028] The controller first defines a scheduled time-temperature profile for the batch sterilization process. The controller then compiles an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures sensed by the sensor. Before a temperature deviation has begun, the controller controls the batch sterilizer so as to administer an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile. The temperature deviation is between the actual retort time-temperature profile and a scheduled processing time-temperature profile.

[0029] In response to the temperature deviation, the controller defines a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation clears. This is done by simulating the batch sterilization process based on the actual retort time-temperature profile. Furthermore, during the temperature deviation, the controller controls the batch sterilizer so as to administer corrections to clear the temperature deviation between the actual retort and re-scheduled remaining time-temperature profiles.

[0030] When the temperature deviation has finally cleared, the controller controls the batch sterilizer so as to administer the remaining portion of the batch sterilization process. This is done according to the re-scheduled remaining time-temperature profile.

BRIEF DESCRIPTION OF THE DRAWINGS

[0031] FIGS. 1 to 3 are timing diagrams of prior art approaches to controlling and providing on-line correction of a batch sterilization process.

[0032]FIG. 4 is a block diagram of a batch sterilization system in accordance with the present invention.

[0033]FIG. 5 is a block diagram of a controller of the batch sterilization system of FIG. 4.

[0034]FIG. 6 is an overall process flow diagram for one embodiment of the controller of FIG. 5 in controlling and providing on-line correction of a batch sterilization process.

[0035] FIGS. 7 and 8 are timing diagrams for the overall process flow of FIG. 6.

[0036] FIGS. 9 to 12 are detailed process flow diagrams for various steps of the overall process flow diagram of FIG. 6.

[0037]FIG. 13 is a timing diagram for another embodiment of the controller of FIG. 5.

DETAILED DESCRIPTION OF THE INVENTION

[0038] Referring to FIG. 4, there is shown a batch sterilization system 100 for performing a batch sterilization process on a batch 101 of containers that contain a food product. The system comprises a batch sterilizer 102, a retort temperature sensor 103, a programmed controller 104, and a host computer 105. The controller controls and provides on-line correction of the process by controlling the batch sterilizer. This is done in response to the actual retort time-temperature profile T_(aRT)(t) in the batch sterilizer that is sensed with the retort temperature sensor 103 and compiled by the controller. The host computer is used to provide input information, namely input parameters and software, used by the controller in controlling the process. The host computer is also used to receive, process, and display output information about the process which is generated by the controller.

[0039] 1. Hardware and Software Configuration of Controller 104

[0040] Referring to FIG. 5, the controller 104 comprises a main control computer 106 that includes a microprocessor (i.e., CPU) 107, a primary memory 113, and a secondary memory 118. The microprocessor executes an operating system 108, a process control program 109, a process scheduling program 110, and a temperature deviation program 111 of the controller. The operating system and programs are loaded from the secondary memory into the primary memory during execution.

[0041] The operating system 108 and the programs 109 to 111 are executed by the microprocessor 107 in response to commands issued by the operator. These commands may be issued with a user interface 114 of the main control computer 106 and/or the host computer 105 via a host computer interface 115 of the controller 104. The operating system controls and coordinates the execution of the programs 109 to 111. Data 116 generated by the operating system and the programs during execution and data 116 inputted by the operator is stored in the primary memory 113. This data includes input information provided by the operator with the user interface and/or the host computer via the host computer interface. It also includes output information that is to be displayed to the operator and provided to the user interface or the host computer via the host computer interface.

[0042] The controller 104 also comprises control circuitry 117. The control circuitry includes circuits, microprocessors, memories, and software to control the batch sterilization process by generating control signals that control the sequential operation of the batch sterilizer 102. As alluded to earlier, the software may be downloaded from the host computer 105 and provided to the control circuitry by the process control program 109. The control signals are generated in response to commands generated by the process control program and issued to the control circuitry from the microprocessor 107 via the control circuitry interface 122.

[0043] Furthermore, at each real sampling time t_(r) of the batch sterilization process, the control circuitry 117 receives sensor signals from the retort temperature sensor 103 that represent the actual retort temperature T_(aRT)(t_(r)) sensed by this sensor. The control circuitry generates the control signals for controlling the batch sterilizer 102 in response to the sensed actual retort temperature. The sensed actual retort temperature is also provided to the microprocessor 107 via the control circuitry interface 122 and recorded by the process control program 109 as data 116 in the primary memory 113. In this way, the process control program compiles and records the actual retort time-temperature profile T_(aRT)(t) in the primary memory. This profile is used in the manner described later for providing on-line correction of the batch sterilization process.

[0044] The sensor 103 is preferably located in the slowest heating zone of the batch sterilizer 102 to provide a conservative estimate of the actual retort temperature T_(aRT)(t_(r)). However, if this is not possible, the process control program 109 may adjust the temperature provided by the sensor to estimate the actual retort temperature at the slowest eating zone. This adjustment would be done according to temperature distribution tests conducted on the batch sterilizer.

[0045] As mentioned earlier, the operating system 108 and the programs 109 to 111 are normally stored in the secondary memory 118 and then loaded into the primary memory 113 during execution. The secondary memory comprises a computer readable memory 124 that is readable by the main control computer 106 of the controller 104. This computer readable memory is therefore used to direct the controller in controlling and providing on-line correction of the batch sterilization process. The computer readable memory may comprise a PROM (programmable read only memory) that stores the operating system and/or programs. Alternatively or additionally, the computer readable memory may comprise a magnetic or CD ROM storage disc that stores the operating system and/or programs. The computer readable memory in this case is readable by the main control computer with a magnetic or CD ROM storage disk drive of the secondary memory. Moreover, the operating system and/or programs could also be downloaded to the computer readable memory or the primary memory from the host computer 105 via the host computer interface 115.

[0046] 2. Example Embodiment

[0047] In an exemplary embodiment, the controller 104 controls the batch sterilization process according to the flow and timing diagrams of FIGS. 6 to 12. In doing so, a finite difference simulation model is used by the process scheduling and temperature deviation programs 110 and 111 to simulate the product cold spot time-temperature profile T_(CS)(t) of the batch 101 of containers being processed. This model may be the earlier mentioned NumeriCAL model and used for both conduction heated food products and convection heated food products. Or, it may be one of the models described in the Teixeira et al., 1969 and Manson et al., 1970 references and used for conduction heated food products. As will be evident from the foregoing discussion, the novelty of the invention described herein is not in which model is used, but in the manner in which it is used according to the flow and timing diagrams in FIGS. 6 to 12.

[0048] 2.a. Overall Process Flow

[0049] In the first step 126 of the overall process flow of FIG. 6, the input parameters for the batch sterilization process are defined and provided to the controller 104. The input parameters include a predefined sampling time period Δt_(r) (e.g., .0.1 to 1 second) for each real time increment [t_(r)−Δt, t_(r)] from the previous real sampling time t_(r)−Δt_(r) to the current real sampling time t_(r) during the process. These input parameters also include the initial product temperature T_(IP) for the food product in the containers of the batch 101 being processed. The initial product temperature T_(IP) is manually measured by the operator by using one of the containers of the batch as a sample. The input parameters also include the traditional heating and cooling factors j_(h), f_(h), X_(bh), f₂, j_(c), and f_(c) to be used in the simulation model. The heating factors j_(h), f_(h), X_(bh), and f₂ are respectively the heating time lag factor, the heating curve slope factor, the broken heating time factor, and the broken heating curve slope factor that are pre-defined for the food product. Similarly, the cooling factors j_(c) and f_(c) are respectively the cooling time lag factor and the cooling curve slope factor that are also pre-defined for the food product. The input parameters further include the earlier discussed thermal characteristic z for destroying a particular microorganism in the food product and the associated reference temperature T_(REF). Also included in the input parameters are the earlier discussed target lethalities F_(targh) and F_(targtot). Finally, the input parameters include the earlier discussed scheduled processing retort temperature T_(pRT) and the earlier discussed pre-defined come-up and cooling time-temperature gradients T_(uRT)(t) and T_(cRT)(t) for the batch sterilizer 102.

[0050] In order to perform step 126, the operator issues commands with the user interface 114 and/or the host computer 105 to invoke the process control program 109. Then, the operator enters the input parameters T_(IP), j_(h), f_(h), X_(bh), f₂, j_(c), f_(c), T_(uRT)(t), T_(cRT)(t), and T_(pRT) ⁰ with the user interface and/or the host computer. The process control program loads the entered input parameters into the primary memory 113 for use by the programs 109 to 111. The execution of these programs is controlled and coordinated by the process control program in the manner discussed next.

[0051] The process control program 109 first invokes the process scheduling program 110. In step 127, the process scheduling program simulates the entire batch sterilization process to define a scheduled total time-temperature profile T_(sRT)(t)⁰ over a scheduled total time interval [t₀, t_(c) ⁰]. This is simulation covers the come-up, processing, and cooling phases of the process. Therefore, the profile T_(sRT)(t)⁰ has come-up, processing, and cooling portions that are predicted to respectively occur over scheduled come-up, processing, and cooling time intervals (t₀, t_(u) ⁰], (t_(u) ⁰, t_(p) ⁰], and (t_(p) ⁰, t_(c) ⁰]. The come-up portion comprises the portion of the come-up time-temperature gradient T_(uRT)(t) over the time interval (t₀, t_(u) ⁰] and between an initial retort temperature T_(iRT) and the scheduled processing retort temperature T_(pRT) ⁰. The processing portion comprises the temperature T_(pRT) ⁰ over the time interval (t_(u) ⁰, t_(p) ⁰]. And, the cooling portion comprises the portion of the cooling time-temperature gradient T_(cRT)(t) over the time interval (t_(p) ⁰, t_(c) ⁰] and between the temperature T_(pRT) ⁰ and an ending retort temperature T_(eRT). The precise manner in which step 127 is performed is discussed in greater detail in section 2.b., but will be briefly discussed next

[0052] The scheduled total time-temperature profile T_(sRT(t)) ⁰ is defined by using the simulation model mentioned earlier. Specifically, the process scheduling program 110 model is used to iteratively and incrementally simulate a scheduled product cold spot time-temperature profile T_(CS)(t)⁰ that is predicted to occur during the batch sterilization process. This simulation is based on the input parameters T_(IP), j_(h), f_(h), x_(bh), f₂, j_(c), f_(c), T_(uRT)(t), T_(pRT) ⁰, and T_(cRT)(t).

[0053] The process scheduling program 110 also iteratively and incrementally computes a lethality F⁰ that is predicted to be delivered to the batch 101 during the batch sterilization process. In doing so, the program 110 computes a heating lethality F⁰ that satisfies the target heating lethality F_(targh) and is predicted to be delivered over a scheduled heating time interval [t₀, t_(p) ⁰] covering just the come-up and processing phases. This computation is made based on the portion of the product cold spot time-temperature profile T_(CS)(t)⁰ over the time interval [t₀, t_(p) ⁰] and the input parameters z and T_(REF). Furthermore, the lethality equation described earlier is used to make this computation, where t_(m)=t₀, t_(k)=t_(p) ⁰, T_(CS)(t)=T_(CS)(t)⁰, and F=F⁰. The come-up and processing portions of the scheduled total time-temperature profile T_(sRT)(t)⁰ on which the portion of the profile T_(CS)(t)⁰ over the time interval [t₀, t_(p) ⁰] is based are defined as a result.

[0054] Similarly, the process scheduling program 110 also iteratively and incrementally computes a total lethality F⁰ that satisfies the target total lethality F_(targtot) and is predicted to be delivered over a scheduled total time interval [t₀, t_(c) ⁰] covering the entire batch sterilization process. The lethality equation is also used in this computation, but where t_(k)=t_(c) ⁰. The predicted total lethality is computed based on the portion of the product cold spot time-temperature profile T_(CS)(t)⁰ over a scheduled cooling time interval (t_(p) ⁰, t_(c) ⁰], the predicted heating lethality F⁰ over [t₀, t_(p) ⁰], and the input parameters z and T_(REF). The predicted total lethality F⁰ over [t₀, t_(c) ⁰] is in fact the sum of the predicted heating lethality F⁰ over [t₀, t_(p) ⁰] and a cooling lethality F⁰ predicted to be delivered to the batch 101 over the scheduled cooling time interval (t_(p) ⁰, t_(c) ⁰]. In this way, the cooling portion of the scheduled total time-temperature profile T_(sRT)(t)⁰ on which the portion of the profile T_(CS)(t)⁰ over the time interval (t_(p) ⁰, t_(c) ⁰] is based is also defined.

[0055] Referring now to both FIGS. 6 and 7, the process control program 109 then causes the come-up phase in step 128 to be administered by the control circuitry 117. The control circuitry does so in accordance with the come-up portion of the scheduled total time-temperature profile T_(sRT)(t)⁰ by appropriately controlling the batch sterilizer 102. This means that the actual retort time-temperature profile T_(aRT)(t) is brought up along the come-up portion of the profile T_(sRT)(t)⁰ over the scheduled come-up time interval [t₀, t_(u) ⁰]. More specifically, the control circuitry controls the batch sterilizer and monitors the sensed actual retort temperature T_(aRT)(t_(r)) at each real sampling time t_(r) to make sure that this temperature stays at least equal to the corresponding scheduled come-up retort temperature T_(sRT)(t_(r))⁰ for that time. The temperature T_(sRT)(t_(r))⁰ is obtained from the profile T_(sRT)(t)⁰.

[0056] After the come-up phase has been administered, the process control program 109 controls the administration of the processing phase in steps 130 to 149 of FIG. 6. In doing so, it first clears a deviation flag and sets a deviation counter n to zero in step 129 of the flow diagram. The flag is used to indicate whether or not a temperature deviation is occurring and the counter n is used to identify each temperature deviation that does occur.

[0057] Then, at the current real sampling time t_(r), it causes the control circuitry 117 in step 130 to administer the processing phase at the scheduled processing retort temperature T_(pRT) ⁰. In administering the processing phase at the time t_(r), the control circuitry appropriately controls the batch sterilizer 102 and monitors the actual retort time-temperature profile T_(aRT)(t) to verify that it is at least equal to the temperature T_(pRT) ⁰. In this embodiment of the controller 104, the scheduled processing retort temperature T_(pRT) ⁰ will remain the same throughout the processing phase regardless if a temperature deviation occurs.

[0058] Then the process control program 109 waits for the next real sampling time t_(r)=t_(r)+Δt_(r) in step 131. In step 132, the process control program determines whether the processing phase is over. Since the deviation counter n has been initially set to zero in step 129, this is done initially until the first temperature deviation occurs by determining whether the current real sampling time t_(r) is the scheduled processing end time t_(p) ⁰. In this embodiment of the controller 104, the processing end time t_(p) ^(n) scheduled in response to the nth temperature deviation is re-scheduled (i.e., re-defined) whenever the (n+1)th temperature deviation occurs. This will be explained in greater detail later.

[0059] In step 133, the process control program 109 records the actual retort temperature T_(aRT)(t_(r)) at the current real sampling time t_(r). In this way, the actual retort time-temperature profile T_(aRT)(t) is compiled.

[0060] Then, in step 134, the process control program 109 determines whether a temperature deviation is occurring at the current real sampling time t_(r). In doing so, the program monitors the actual retort time-temperature profile T_(aRT)(t) to determine if the actual retort temperature T_(aRT)(t_(r)) at the time is less than the scheduled processing temperature T_(pRT) ⁰. Since the deviation counter n is initially set to zero, the program is actually determining whether the deviation is occurring between the actual retort time-temperature profile and the processing portion of the scheduled total time-temperature profile T_(sRT)(t)⁰.

[0061] If no deviation is occurring and the process control program 109 determines in step 135 that the deviation flag is cleared, then it returns to step 130. Steps 130 to 135 are then repeated until it is determined in step 132 that the processing phase is over or it is determined in step 134 that a temperature deviation is occurring.

[0062] If the process control program 109 does determine in step 134 that a temperature deviation is occurring, it then determines in step 136 whether the deviation flag is set. If it is not, this means that the deviation has just begin at the current real sampling time t_(r). In this case, the deviation counter n is incremented to one to identify the first deviation and the time t_(r) is recorded as the deviation begin time t_(d) ¹ in step 137. If the deviation flag is set in step 136, then the deviation has already begun and was previously detected in step 134 before the time t_(r). In this case, the program proceeds to step 138.

[0063] As alluded to earlier, the control circuitry 117 monitors the actual retort temperature T_(aRT)(t_(r)) at the current real sampling time t_(r). Therefore, in step 138, the control circuitry administers at this time a correction according to the scheduled processing retort temperature T_(pRT) ⁰. This is done by appropriately controlling the batch sterilizer 102 to eventually bring the actual retort temperature up to at least the temperature T_(pRT) ⁰.

[0064] Then, the process control program 109 invokes the temperature deviation program 111. In step 139, the invoked program computes a heating lethality F¹ actually delivered to the product cold spot of the batch 101 over the expired time interval [t₀, t_(r)]. This is done by simulating the portion of the batch sterilization process that was actually administered over this time interval. This portion includes the come-up phase and the portion of the processing phase actually administered prior to and including the time t_(r).

[0065] In performing this simulation, the simulation model mentioned earlier is used to iteratively and incrementally simulate the portion of a product cold spot time-temperature profile T_(CS)(t)¹ that actually occured over the expired time interval [t₀, t_(r)]. This simulation is based on the input parameters T_(IP), j_(h), f_(h), X_(bh), and f₂ and the actual retort time-temperature profile T_(aRT)(t) over the time interval [t₀, t_(r)]. From this portion of the profile T_(CS)(t)¹ and the input parameters z and T_(REF), the program 110 iteratively and incrementally computes the heating lethality F¹ actually delivered over the time interval [t₀, t_(r)]. This is done using the lethality equation described earlier, where t₀=t_(m), t_(r)=t_(k), T_(CS)(t)¹=T_(CS)(t), and F¹=F. The precise manner in which step 139 is performed is discussed in greater detail in section 2.c.

[0066] In step 140, the temperature deviation program 111 determines whether the actual heating lethality F¹ over [t₀, t_(r)] satisfies the target heating lethality F_(targh), If it does not, then this means that the processing phase must continue in order to properly deliver the target heating lethality F_(targh) to the batch 101. As a result, the program 111 returns control to the process control program 109.

[0067] In step 141, the process control program 109 sets the deviation flag to indicate that a deviation is currently occurring. It then waits in step 149 for the next real sampling time t_(r)=t_(r)+Δt_(r) to return to steps 133 and 134 to determine whether the deviation is still occurring.

[0068] But, if it is determined in step 140 that the actual heating lethality F¹ over [t₀, t_(r)] does satisfy the target heating lethality F_(targh), then the temperature deviation program 111 proceeds to step 142. In step 142, this program simulates the remaining portion of the batch sterilization process that is predicted to be administered after the current real sampling time t_(r), assuming that the processing phase ends at this time. This portion is, of course, the cooling phase. The simulation is done in order to compute a total lethality F¹ predicted to be delivered to the batch over a predicted total time interval [t₀, t_(r)+Δt_(c) ¹].

[0069] In performing this simulation, the simulation model mentioned earlier is used to iteratively simulate the remaining portion of the product cold spot time-temperature profile T_(CS)(t)¹ predicted to occur over the predicted total time interval [t₀, t_(r)+Δt_(c) ¹]. This simulation is based on the input parameters j_(c), f_(c), T_(cRT)(t) and the actual product cold spot temperature T_(CS)(t_(r))¹ at the current real sampling time t_(r). This temperature T_(CS)(t_(r))¹ is obtained from the actual portion of the profile T_(CS)(t)¹ that was simulated in step 139.

[0070] Since it is assumed that the processing phase has ended at the time try the cooling time-temperature gradient T_(cRT)(t) is shifted over to begin at a selected cooling retort temperature T_(cRT) ¹ which is offset from the actual retort temperature T_(aRT)(t_(r)) at the time t_(r). The time duration Δt_(c) ¹ therefore covers the portion of the gradient T_(cRT)(t) that is between the temperature T_(cRT) ¹ and the ending retort temperature T_(eRT). This allows the actual retort time-temperature profile T_(aRT)(t) to be brought down along and at least equal to this portion of the gradient T_(cRT)(t).

[0071] The program 110 iteratively and incrementally computes the predicted total lethality F¹ over [t₀, t_(r)+Δt_(c) ¹] based on the product cold spot time-temperature profile T_(CS)(t)¹, the actually delivered heating lethality F¹ over [t₀, t_(r)], and the input parameters z and T_(REF). This is done using the lethality equation described earlier, where t₀=t_(m), t_(r)+Δt_(c)=t_(k), T_(CS)(t)¹=T_(CS)(t), and F¹=F. The precise manner in which step 142 is performed is discussed in greater detail in section 2.d.

[0072] In step 143, the temperature deviation program 111 determines whether the processing phase is to end at the current real sampling time t_(r) while the temperature deviation is still occurring. This is done by determining if the predicted total lethality F¹ over [t₀, t_(r)+Δt_(c) ¹] satisfies the target heating lethality F_(targtot). If it is determined that the processing phase has ended, then the program proceeds to step 147 which will be discussed later.

[0073] In the case where it is determined in step 143 that the processing phase is to continue, the temperature deviation program 111 returns control to the process control program 109. The process control program then sets the deviation flag in step 141 to indicate that a deviation is currently occurring. In step 149, the process control program waits for the next real sampling time t_(r)=t_(r)+Δt_(r). In this way, steps 133 to 143 are repeated for each real sampling time t_(r) beginning with the deviation begin time t_(d) ¹ until it is determined in step 134 that the temperature deviation has cleared or it is determined in step 143 that the processing phase has ended.

[0074] In the case where it is determined in step 134 that the temperature deviation has cleared, the process control program 109 proceeds to step 144 after determining in step 135 that the deviation flag is set. In step 144, the program records the current real sampling time t_(r) as the deviation end time t_(e) ¹ of the deviation. The process control program 109 then again invokes the temperature deviation program 111.

[0075] In step 145, the temperature deviation program 111 simulates the remaining portion of the batch sterilization process that is predicted to be administered beginning at the deviation end time t_(e) ¹. This remaining portion includes the remaining portion of the processing phase beginning with the time t_(e) ¹ and the cooling phase. This is done in order to define a re-scheduled remaining time-temperature profile T_(sRT)(t)¹ over a re-scheduled remaining time interval [t_(e) ¹, t_(c) ¹].

[0076] The re-scheduled remaining time-temperature profile T_(pRT)(t)¹ has a remaining processing portion over a re-scheduled remaining processing time interval (t_(e) ¹, t_(p) ¹]. This portion comprises the scheduled processing retort temperature T_(pRT) ⁰ as constant over the time interval (t_(e) ¹, t_(p) ¹]. Thus, the first temperature deviation is actually cleared between the actual retort time-temperature profile T_(aRT)(t) and this portion of the profile T_(sRT)(t)¹ at the deviation end time t_(e) ¹. The profile T_(sRT)(t)¹ also has a cooling portion over a re-scheduled cooling time interval (t_(p) ¹, t_(c) ¹]. This portion comprises the portion of the time-temperature gradient T_(cRT)(t) between the temperature T_(pRT) ⁰ and the ending retort temperature T_(eRT) over the time interval (t_(p) ¹, t_(c) ¹].

[0077] The precise manner in which step 145 is performed is briefly discussed next and is discussed in greater detail in section 2.e. The simulation model mentioned earlier is used by the temperature deviation program 111 in step 145. The program 111 uses the model to iteratively and incrementally simulate the portion of the product cold spot time-temperature profile T_(CS)(t)¹ that is predicted to occur over the remaining portion of the batch sterilization process. This simulation is done based on the input parameters j_(h), f_(h), X_(bh), f₂, j_(c), f_(c), T_(pRT) ⁰, and T_(cRT)(t) and the product cold spot temperature T_(CS)(t_(e−Δt) _(r))¹ at the previous real sampling time t_(e)−Δt_(r). The product cold spot temperature T_(CS)(t_(e)−Δt_(r)) ¹ is obtained from the actual re-scheduled product cold spot time-temperature profile T_(CS)(t)¹ simulated at the time t_(e) ¹−Δt_(r) in step 139.

[0078] In step 145, the program 110 also iteratively and incrementally computes a total lethality F¹ that is predicted to be delivered to the product cold spot of the batch 101 over the remaining portion of the batch sterilization process. In doing so, the program 110 computes a heating lethality F¹ that satisfies the target heating lethality F_(targh) and is predicted to be delivered over a re-scheduled heating time interval [t₀, t_(p) ¹]. This computation is made based on the portion of the re-scheduled product cold spot time-temperature profile T_(CS)(t)¹ that is predicted to occur over the re-scheduled remaining processing time interval [t_(e) ¹, t_(p) ¹], the actually delivered heating lethality F¹ over [t₀, t_(e) ¹) from step 139, and the input parameters z and T_(REF). Furthermore, the lethality equation described earlier is used to make this computation, where t_(m)=t₀, t_(k)=t_(p) ¹, T_(CS)(t)¹, =T_(CS)(t)¹, and F=F¹. The predicted heating lethality F¹ over [t₀, t_(p) ¹] is therefore the sum of the actually delivered heating lethality F¹ over [t₀, t_(e) ¹) and a heating lethality F¹ predicted to be delivered over the time interval [t_(e) ¹, t_(p) ¹]. The remaining processing portion of the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ on which the portion of the profile T_(CS)(t)¹ over the time interval [t_(e) ¹, t_(p) ¹] is based is defined as a result.

[0079] Similarly, the temperature deviation program 111 also iteratively and incrementally computes a total lethality F¹ that satisfies the target total lethality F_(targtot) and is predicted to be delivered over a re-scheduled total time interval [t₀, t_(c) ¹]. The lethality equation is also used in this computation, but where t_(k)=t_(c) ¹. Moreover, the predicted total lethality F¹ over [t₀, t_(c) ¹] is based on the portion of the product cold spot time-temperature profile T_(CS)(t)¹ predicted to be delivered over a re-scheduled cooling time interval (t_(p) ¹, t_(c) ¹], the predicted heating lethality F¹ over [t₀, t_(p) ¹], and the input parameters z and T_(REF). Thus, the predicted total lethality F¹ over [t₀, t_(c) ¹] is the sum of the predicted heating lethality F¹ over [t₀, t_(p) ¹] and a cooling lethality F¹ predicted to be delivered over the time interval (t_(p) ¹, t_(c) ¹]. The cooling portion of the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ on which the portion of the profile T_(CS(t)) ¹ over the time interval (t_(p) ¹, t_(c) ¹] is based is also defined in this way.

[0080] In step 146, the process control program 109 clears the deviation flag since it has been determined in step 134 that the first temperature deviation has been cleared. The program then returns to step 130. Since the deviation counter n has been incremented to one, the re-scheduled processing end time t_(p) ¹ is now used in step 132. Therefore, steps 130 to 135 will be repeated until it is determined in step 132 that the current real sampling time t_(r) is the end time t_(p) ¹ or until a second temperature deviation is detected in step 134.

[0081] From the foregoing, it should be clear that only the initial portion of the batch sterilization process over the initial time interval [t₀, t_(d) ¹) before the temperature deviation begins will be administered according to the scheduled total time-temperature profile T_(sRT)(t)⁰. Then, when the deviation clears, the remaining portion of the process over the remaining time interval [t_(e) ¹, t_(c) ¹) will be administered according to the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ if a second temperature deviation does not occur.

[0082] The process control program 109 then causes the cooling phase in step 148 to be administered by the control circuitry 117. The control circuitry does so in accordance with the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ by appropriately controlling the batch sterilizer 102. Thus, the actual retort time-temperature profile T_(aRT)(t) is brought down along the cooling portion of the profile T_(sRT)(t)¹ over the re-scheduled cooling time interval (t_(p) ¹, t_(c) ¹]. In doing so, the control circuitry controls the batch sterilizer and monitors the sensed actual retort temperature T_(aRT)(t_(r)) at each real sampling time t_(r) to make sure that it stays at least equal to the corresponding re-scheduled cooling retort temperature T_(sRT)(t_(r))¹ for that time. The temperature T_(sRT)(t_(r)) ¹ is obtained from the profile T_(sRT)(t)¹.

[0083] Referring now to FIGS. 6 and 8, as mentioned earlier, it is possible that the processing phase will actually end at a current real sampling time t_(r) while the temperature deviation is still occurring. This is determined in step 143 when the total lethality F¹ predicted to be delivered over the predicted total time interval [t₀, t_(r)+Δt_(c) ¹] satisfies the target heating lethality F_(targtot). In this case, the temperature deviation program 111 defines in step 147 the re-scheduled processing end time t_(p) ¹ as the time t_(r) and the re-scheduled cooling end time t_(c) ¹ as the time t_(r)+Δt_(c) ¹. Moreover, the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ on which the product cold spot temperature profile T_(CS)(t)¹ is based is also defined in step 147. As alluded to earlier, this comprises the portion of the cooling time-temperature gradient T_(cRT)(t) between the selected cooling and ending retort temperatures T_(cRT) ¹ and T_(eRT) over the re-scheduled remaining time interval (t_(p) ¹, t_(c) ¹].

[0084] The process control program 109 then causes the cooling phase in step 148 to be administered by the control circuitry 117. This is done in accordance with the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ over the re-scheduled remaining time interval (t_(p) ¹,t_(c) ¹] in the manner described earlier.

[0085] It is important to note here that the controller 104 has the unique feature of being able to handle multiple temperature deviations during the processing phase. Thus, as mentioned earlier, it is possible that a second temperature deviation is detected in step 134 after the first temperature deviation. In this case, if it is eventually determined in step 134 that this deviation has cleared, steps 133 to 149 are repeated to define another re-scheduled remaining time-temperature profile T_(pRT)(t)² over another re-scheduled remaining time interval [t_(e) ², t_(p) ²]. But, it may be determined in step 143 that the processing phase has in fact ended while the deviation is still occurring. In this case, the profile T_(sRT(t)) ² over the time interval (t_(p) ^(2,) t_(c) ²] is defined in step 147 and the cooling phase is administered in step 148 accordingly.

[0086] 2.b. Detailed Process Flow for Step 127 of FIG. 6

[0087]FIG. 9 shows the detailed process flow that the process scheduling program 110 uses in step 127 of FIG. 6 to define the scheduled total time-temperature profile T_(sRT)(t)⁰. The program 109 first iteratively performs a simulation of the come-up phase in sub-steps 150 to 156 of step 127.

[0088] In step 150, the current simulation sampling time t_(s) is initially set to the come-up begin time t₀. The product cold spot temperature T_(CS)(t_(s))⁰ at the current simulation sampling time t_(s) is therefore initially set in step 150 to the initial product temperature T_(IP). And, the heating lethality F⁰ predicted to be delivered to the product cold spot over the current simulation time interval [t₀, t_(s)] is initially set in step 150 to zero.

[0089] Steps 151 to 155 are then performed by the process scheduling program 110 in each iteration of the come-up phase simulation. In step 151 of each iteration, the current simulation sampling time t_(s) is incremented by the amount of the sampling period Δt_(r). This results in a new current simulation sampling time t_(s).

[0090] The portion of the product cold spot time-temperature profile T_(CS)(t)⁰ predicted to occur over the current simulation time increment [t_(s)−Δt_(r), t_(s)] is then simulated in step 152 of each iteration by the process scheduling program 110. This is done using the simulation model discussed earlier. Moreover, this simulation is based on the heating factors j_(h), f_(h), X_(bh), and f₂, the product cold spot temperature T_(CS)(t_(s−Δt) _(r))⁰ at the previous simulation sampling time t_(s)−Δt_(r), and the corresponding scheduled come-up retort temperature T_(uRT)(t_(s)) at the current simulation time t_(s). In the first iteration, the product cold spot temperature T_(CS)(t_(s)−Δt_(r))⁰ will be the initial product temperature T_(IP)from step 150. However, in each subsequent iteration, this temperature is obtained from the product cold spot time-temperature profile T_(CS)(t)⁰ over the previous simulation time increment [t_(s)−2Δt_(r), t_(s)−Δt_(r)] simulated in step 152 of the previous iteration. The temperature T_(uRT)(t_(s)) is obtained from the pre-defined come-up time-temperature gradient T_(uRT)(t).

[0091] Then, in step 153 of each iteration, the process scheduling program 110 computes the heating lethality F⁰ that is predicted to be delivered over the current simulation time increment [t_(s)−Δt_(r), t_(s)]. This is done based on the portion of the product cold spot time-temperature profile T_(CS)(t)⁰ over the time increment [t_(s)−Δt_(r), t_(s)] and the input parameters z and T_(REF). This is also done in accordance with the lethality equation described earlier, where t_(s)−Δt_(r)=t_(m), t_(s)=t_(k), T_(CS)(t)⁰ =T_(CS)(t), and F⁰=F.

[0092] In step 154 of each iteration, the process scheduling program 110 computes the heating lethality F⁰ predicted to be delivered over the current simulation time interval [t₀, t_(s)]. This is done by adding the predicted heating lethality F⁰ over [t_(s)−Δt_(r), t_(s)] from step 153 to the heating lethality F⁰ predicted over the previous simulation time interval [t₀, t_(s)−Δt_(r)]. In the first iteration, the lethality F⁰ over [t₀, t_(s)−Δt_(r)] is zero from step 150. In each subsequent iteration, this lethality is computed in step 154 of the previous iteration.

[0093] Then, in step 155 of each iteration, the process scheduling program 110 determines whether the corresponding scheduled come-up retort temperature T_(uRT)(t_(s)) at the current simulation time t_(s) is the scheduled processing retort temperature T_(pRT) ⁰. This temperature T_(uRT(t) _(s)) is obtained from the come-up time-temperature gradient T_(uRT)(t). If the temperatures T_(uRT)(t_(s)) and T_(pRT) ⁰ are not the same, then the process scheduling program 110 returns to step 151 for the next iteration. In this way, steps 151 to 155 are repeated in each subsequent iteration until it is determined that the temperatures T_(uRT)(t_(s)) and T_(pRT) ⁰ are the same. When this occurs, the scheduled come-up end time t_(u) ⁰ is defined as the current simulation sampling time t_(s) in step 156 by the program 110. The program 110 also defines the come-up portion of the scheduled total time-temperature profile T_(sRT)(t)⁰ as the portion of the come-up time-temperature gradient T_(uRT)(t) between the initial and scheduled processing retort temperatures T_(iRT) and T_(pRT) ⁰ over the scheduled come-up time interval [t₀, t_(u,0)].

[0094] Alternatively, the scheduled come-up end time t_(u) ⁰ may be directly defined by the operator from the come-up time-temperature gradient T_(uRT)(t) using the scheduled processing retort temperature T_(pRT) ⁰. The time t_(u) ⁰ would be entered as one of the input parameters. Then, the determination in step 155 would be whether this time t_(u) ⁰ and the current simulation sampling time t_(s) are the same.

[0095] The process scheduling program 110 then iteratively performs a simulation of the processing phase in sub-steps 157 to 162 of step 127. Steps 157 to 161 are performed in each iteration of the processing phase simulation. Moreover, steps 157 to 160 are respectively the same as steps 151 to 154, except for the differences described next.

[0096] In step 158 of each iteration, the portion of the product cold spot time-temperature profile T_(CS)(t)⁰ predicted to occur over the current simulation time increment [t_(s)−Δt_(r), t_(s)] is simulated based on the scheduled retort processing temperature T_(pRT) ⁰. The temperature T_(pRT) ⁰ is used in the simulation instead of a scheduled come-up retort temperature T_(uRT)(t_(s)). It should be noted that, in step 158 of the first iteration, the scheduled product cold spot temperature T_(CS)(t_(s)−Δt_(r))⁰ is obtained from the profile T_(CS)(t)⁰ predicted over the previous simulation time increment [t_(s)−2Δt_(r), t_(s)−Δt_(r)] in step 152 of the last iteration of the come-up phase simulation. Similarly, in step 160 of the first iteration, the heating lethality F⁰ predicted over the previous simulation time interval [t₀, t_(s)−Δt_(r)] is computed in step 154 of the last iteration of the come-up phase simulation.

[0097] Then, in step 161 of each iteration, the process scheduling program 110 determines whether the heating lethality F⁰ predicted over the current simulation time interval [t₀, t_(s)] is at least equal to the target heating lethality F_(targh). If it is not, then the process scheduling program 110 returns to step 157 for the next iteration. As a result, the steps 157 to 161 are repeated for each subsequent iteration until it is determined in step 161 that the lethality F⁰ over the current simulation time interval [t₀, t_(s)] is in fact at least equal to the lethality F_(targh). When this occurs, the program 110 defines in step 162 the scheduled processing end time t_(p) ⁰ as the current simulation sampling time t_(s). As a result, the program 110 also defines in step 162 the processing portion of the scheduled total time-temperature profile T_(sRT)(t)⁰ as the constant scheduled processing retort temperature T_(pRT) ⁰ over a scheduled processing time interval (t_(u) ^(2,) t_(p) ⁰]. The program 110 further defines in step 162 the heating lethality F⁰ predicted over the scheduled heating time interval [t₀, t_(p) ⁰] as the lethality F⁰ predicted over the current simulation time interval [t₀, t_(s)] in step 160 of the last iteration. Finally, the program 110 defines in step 162 the scheduled product cold spot temperature T_(CS)(t_(p) ⁰)⁰ at the time t_(p) ⁰ as the product cold spot temperature T_(CS)(t_(s))⁰ obtained from the product cold spot temperature profile T_(CS)(t)⁰ simulated over the time increment [t_(s)−Δt_(r), t_(s)] in step 158 of the last iteration.

[0098] The process scheduling program 110 then iteratively performs a simulation of the cooling phase in sub-steps 163 to 170 of step 127. Steps 163 to 167 are performed in each iteration of the cooling phase simulation. Furthermore, steps 163 to 166 are respectively the same as steps 151 to 154 described earlier, except for some differences that are discussed next.

[0099] In step 164 of each iteration, the process scheduling program 110 simulates the portion of the scheduled product cold spot time-temperature profile T_(CS)(t)⁰ predicted over the current simulation time increment [t_(s)−Δt_(r), t_(s)]. This is simulation is based on the cooling factors j_(c) and f_(c) and the scheduled cooling retort temperature T_(cRT)(t_(s)) at the current simulation sampling time t_(s). The temperature T_(cRT)(t_(s)) is obtained from the scheduled cooling time-temperature gradient T_(cRT)(t). Moreover, for the first iteration, the product cold spot temperature T_(CS)(t_(s)−Δt_(r))⁰ is obtained from the profile T_(CS)(t)⁰ predicted over the previous simulation time increment [t_(s)−2Δt_(r), t_(s)−Δt_(r)] in step 158 of the last iteration of the processing phase simulation. For each subsequent iteration, the product cold spot temperature T_(CS)(t_(s)−Δt_(r))⁰ is obtained from the profile T_(CS)(t)⁰ predicted over the previous simulation time increment [t_(s)−2Δt_(r), t_(s)−Δt_(r)] in step 164 of the previous iteration.

[0100] In step 165 of each iteration, a cooling lethality F⁰ that is predicted to be delivered to the batch 101 over the current simulation time increment [t_(s)−Δt_(r), t_(s)] is computed by the process scheduling program 110. Then, in step 166 of each iteration, the total lethality F⁰ predicted to be delivered over the current simulation time interval [t₀, t_(s)] is computed. This is done by adding the lethality F⁰ predicted over the current simulation time increment [t_(s)−Δt_(r), t_(s)] in step 165 of the iteration to the lethality F⁰ predicted over the previous simulation time interval [t₀, t_(s)−Δt_(r)]. For the first iteration, the lethality F⁰ over [t₀, t_(s)−Δt_(r)] is computed in step 160 of the last iteration of the processing phase simulation. But, for each subsequent iteration, this lethality is computed in step 166 for the previous iteration.

[0101] Then, in step 167 of each iteration, the process scheduling program 110 determines whether the corresponding scheduled cooling retort temperature T_(cRT)(t_(s)) at the current simulation time t_(s) is the ending retort temperature T_(eRT) of the cooling retort time-temperature gradient T_(cRT)(t). If it is not, then the process scheduling program 110 returns to step 163 for the next iteration. Thus, steps 163 to 167 are repeated in each subsequent iteration until it is determined in step 167 that the temperatures T_(ucRT)(t_(s)) and T_(eRT) are the same.

[0102] When this finally occurs, the program 110 determines in step 168 whether the total lethality F⁰ predicted over the current simulation time interval [t₀, t_(s)] is at least equal to the target total lethality F_(targtot). If it is, then the program 110 defines the scheduled cooling end time t_(c) ⁰ as the time t_(s) in step 169. The program 110 also defines in step 169 the cooling portion of the scheduled total time-temperature profile T_(sRT)(t)⁰ as the portion of the gradient T_(cRT)(t) between the scheduled processing and ending retort temperatures T_(pRT) ⁰ and T_(eRT) over the scheduled cooling time interval [t_(p) ⁰, t_(c) ⁰].

[0103] But, it may be determined in step 168 that the total lethality F⁰ predicted over the current simulation time interval [t₀, t_(s)] is at least equal to the target total lethality F_(targtot). In this case, program 110 re-sets the current simulation sampling time t_(s) in step 170 to the scheduled processing end time t_(p) ⁰ defined in step 162. In view of this, the program 110 also re-sets the lethality F⁰ predicted over the simulation time interval [t₀, t_(s)] to the heating lethality F⁰ over the scheduled heating time interval [t₀, t_(p) ⁰] defined in step 162. Furthermore, the program 110 re-sets the product cold spot temperature T_(CS)(t_(s))⁰ to the product cold spot temperature T_(CS)(t_(p) ⁰)⁰ defined step 162.

[0104] The process scheduling program 110 then returns to step 157. As a result, steps 157 to 161 will be performed in another iteration in the processing phase and the scheduled processing end time t_(p) ⁰ will be redefined in step 162. The re-defined scheduled processing end time t_(p) ⁰ will be the previously defined one incremented by the amount of the sampling period Δt_(r). Then, the entire cooling phase will be iteratively simulated again in steps 163 to 167 and it will be determined in step 168 whether the lethality F over the current simulation time interval [t₀, t_(s)] is at least equal to the target total lethality F_(targtot). If this is not the case, then the program 110 returns again to step 157 and steps 157 to 168 are repeated until it is finally determined in step 168 that the lethality F predicted over the time interval [t₀, t_(s)] does satisfy the target total lethality F_(targtot).. When this occurs, the program 110 defines the cooling portion of the scheduled total time-temperature profile T_(sRT)(t)⁰ predicted over the scheduled cooling time interval [t_(p) ⁰, t_(c) ⁰] in step 169 in the manner described earlier.

[0105] The scheduled total time-temperature profile T_(sRT)(t)⁰ is then used to administer the batch sterilization process. This is done in the manner described earlier in section 2.a. discussing the overall process flow of the controller 104.

[0106] 2.c. Detailed Process Flow for Step 139 of FIG. 6

[0107]FIG. 10 shows the detailed process flow that the temperature deviation program 111 uses in step 139 of FIG. 6 at the current real sampling time t_(r) during the nth temperature deviation. As indicated earlier, this program computes in step 139 the re-scheduled lethality F¹ actually delivered over the expired time interval [t₀, t_(r)].

[0108] In sub-step 172 of step 139, the program 111 determines whether the deviation flag is set. If it is not, then this means that the current real sampling time t_(r) is the deviation begin time t_(d) ¹ of the first temperature deviation since the deviation counter is now set to one. In this case, the program 111 proceeds to step 173 and iteratively performs in sub-steps 173 to 179 of step 139 a simulation of the come-up phase and the portion of the processing phase actually administered up to the time t_(r). Steps 174 to 178 are performed in each iteration of the simulation. Furthermore, steps 173 to 178 are respectively the same as steps 150 to 154 of FIG. 9 and discussed in section 2.b., except for the important differences discussed next.

[0109] In step 173 and steps 174 and 175 of each iteration, the portion of the product cold spot time-temperature profile T_(CS)(t)¹ that actually occurred over the current simulation time increment [t_(s)−Δt_(r), t_(s)] and an actual product cold spot temperature T_(CS)(t_(s)−Δt_(r))¹ at the previous simulation sampling time t_(s)−Δt_(r) are simulated and used. This portion of the profile T_(CS)(t)¹ over the time increment [t_(s)−Δt_(r), t_(s)] is simulated based on the actual retort temperature T_(aRT)(t_(s)) recorded for the current simulation sampling time t_(s). The temperature T_(sRT)(t_(s)) is obtained from the compiled actual retort time-temperature profile T_(aRT)(t). Furthermore, actually delivered lethalities F⁰ over [t_(s)−Δt_(r), t_(s)], F⁰ over [t₀, t_(s)], and F⁰ over [t₀, t_(s)−Δt_(r)] are computed and used in steps 176 to 178 of each iteration.

[0110] In step 178 of each iteration, the temperature deviation program 111 determines whether the current simulation sampling time t_(s) has reached the current real sampling time t_(r). If it has not, then the program returns to step 174 for the next iteration. In this way, steps 174 to 178 are repeated in each subsequent iteration until it is determined that the times t_(s) and t_(r) are the same.

[0111] When this finally occurs, the temperature deviation program 111 defines in step 179 the heating lethality F¹ actually delivered over the expired real time interval [t₀, t_(r)] as the lethality F¹ computed over the current simulation time interval [t₀, t_(s)] in step 177 of the last iteration. Similarly, the program defines the actual product cold spot temperature T_(CS)(t_(r))¹ at the time t_(r) as the product cold spot temperature T_(CS)(t_(s))¹. The temperature T_(CS)(t_(s))¹ is obtained from the portion of the product cold spot time-temperature profile T_(CS)(t)¹ simulated over the time increment [t_(s−Δt) _(r), t_(s)] in step 175.

[0112] But, it may be determined in step 172 that the deviation flag is set. In this case, the current real sampling time t_(r) is not the deviation begin time t_(d) since the temperature deviation has already begun. The temperature deviation program 111 then proceeds to step 180 where it sets the current simulation sampling time t_(s) to the time t_(r). The program also sets in step 180 the lethality F¹ over the previous simulation time interval [t₀, t_(s)−Δt_(r)] to the heating lethality F¹ actually delivered over the expired real time interval [t₀, t_(r)−Δt_(r)] defined at the previous real sampling time t_(r)−Δt_(r) in step 179. Then, steps 175 to 179 are performed in the manner just discussed to define the actually delivered heating lethality F¹ over [t₀, t_(r)] and the actual product cold spot temperature T_(CS)(t_(r))¹ at the time t_(r).

[0113] 2.d. Detailed Process Flow for Step 142 of FIG. 6

[0114]FIG. 11 shows the detailed process flow that the temperature deviation program 111 uses in step 142 of FIG. 6 at the current real sampling time t_(r) during the first temperature deviation. As indicated earlier, the total lethality F¹ predicted to be delivered over the re-scheduled total time interval [t₀, t_(r)+Δt_(c) ¹] is computed by the program 111 in step 142.

[0115] In doing so, the program 111 iteratively performs in sub-steps 182 to 186 of step 142 a simulation of the cooling phase beginning at the time t_(r) assuming that the processing phase has ended. Steps 182 to 185 are performed in each iteration of the cooling phase simulation. And, steps 182 to 186 are respectively the same as steps 163 to 167 of FIG. 9 and discussed in section 2.b., except for the notable differences discussed next.

[0116] In steps 182 and 183 of each iteration, the portion of the product cold spot time-temperature profile T_(CS)(t)¹ that is predicted to occur over the current simulation time increment [t_(s)−Δt_(r), t_(s)] and a predicted product cold spot temperature T_(CS)(t_(s)−Δt_(r))¹ at the previous simulation sampling time t_(s)−Δt_(r) are simulated and used. The profile T_(CS)(t)¹ over the time increment [t_(s)−Δt_(r), t_(s)] is simulated based on the re-scheduled cooling retort temperature T_(cRT)(t_(s)) at the current simulation sampling time t_(s). The temperature T_(cRT)(t_(s)) is obtained from the scheduled cooling time-temperature gradient T_(cRT)(t). Since it is assumed that the processing phase has ended at the time t_(r), the gradient T_(cRT)(t) is shifted so as to begin at the selected cooling retort temperature T_(cRT) ¹ which is offset from the actual retort temperature T_(aRT)T(t_(r)) at the time t_(r).

[0117] Furthermore, a predicted cooling lethality F⁰ over the current simulation time increment [t_(s)−Δt_(r), t_(s)] is computed and used in steps 183 and 184 of each iteration. In addition, predicted lethalities F⁰ over [t_(s)−Δt_(r), t_(s)], F⁰ over [t₀, t_(s)], and F⁰ over [t₀, t_(s)−Δt_(r)] are computed and used in steps 182 to 184 of each iteration.

[0118] In step 185 of the last iteration, the temperature deviation program 111 determines that the corresponding scheduled cooling retort temperature T_(cRT)(t_(s)) at the current simulation time t_(s) is the ending retort temperature T_(eRT). The program then sets in step 186 the total lethality F¹ predicted to be delivered over the re-scheduled total time interval [t₀, t_(r)+Δt_(c) ¹] to the lethality F¹ computed over the current simulation time interval [t₀, t_(s)] in step 184 of the last iteration. As mentioned earlier, the time duration Δt_(c) ¹ covers the portion of the cooling time-temperature gradient T_(cRT)(t) that is between the selected cooling and ending retort temperatures T_(cRT) ¹ and T_(eRT).

[0119] 2.e. Detailed Process Flow for Step 145 of FIG. 6

[0120]FIG. 12 shows the detailed process flow that the temperature deviation program 111 uses in step 145 of FIG. 6 when the current real sampling time t_(r) is the deviation end time t_(e) ¹ for the first temperature deviation. As indicated earlier, this is done to define the re-scheduled remaining time-temperature profile T_(sRT)(t)¹.

[0121] The program 109 first iteratively performs a simulation of the remaining portion of the processing phase in sub-steps 190 to 196 of step 145 when the first temperature deviation clears at the deviation end time t_(e) ¹. In step 190, the temperature deviation program 111 sets the current simulation sampling time t_(s) to the current real sampling time t_(r). The program also sets in step 190 the lethality F¹ over the current simulation time interval [t₀, t_(s)] to the heating lethality F¹ actually delivered over the expired real time interval [t₀, t_(r)]. The heating lethality F¹ over [t₀, t_(r)] is defined in step 179 of FIG. 10 and discussed in section 2.c. Similarly, the program also sets in step 190 the product cold spot temperature T_(CS)(t_(s))¹ at the time t_(s) to the actual product cold spot temperature T_(CS)(t_(r))¹ at the time t_(r). The product cold spot temperature T_(CS)(t_(r)) is defined in step 179 as well.

[0122] Steps 191 to 195 are performed in each iteration of the simulation of the remaining portion of the processing phase. Moreover, steps 191 to 196 are respectively the same as steps 157 to 162 of FIG. 9 and discussed in section 2.b., except for the differences noted next.

[0123] In steps 192 and 193 of each iteration, the portion of the product cold spot time-temperature profile T_(CS)(t)¹ predicted to occur over the current simulation time increment [t_(s)−Δt_(r), t_(s)] and a predicted product cold spot temperature T_(CS)(t_(s)−Δt_(r))¹ at the previous simulation sampling time t_(s)−Δt_(r) are simulated and used. Furthermore, predicted lethalities F⁰ over [t_(s)−Δt_(r), t_(s)], F⁰ over [t₀, t_(s)], and F⁰ over [t₀, t_(s)−Δt_(r)] are computed and used in steps 193 to 195 of each iteration.

[0124] In step 195 of the last iteration, the temperature deviation program 111 determines that the lethality F⁰ predicted over the current simulation time interval [t₀, t_(s)] satisfies the target heating lethality F_(targh). When this occurs, the program 111 defines in step 196 the re-scheduled processing end time t_(p) ¹, the remaining processing portion of the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ over the re-scheduled remaining processing time interval (t_(e) ¹, t_(p) ¹], the heating lethality F⁰ predicted to be delivered over the re-scheduled heating time interval [t₀, t_(p) ¹], and the product cold spot temperature T_(CS)(t_(p) ¹)¹ predicted at the time t_(p) ¹. The profile T_(sRT)(t)¹ comprises the constant scheduled processing retort temperature T_(pRT) ⁰ over the time interval (t_(e) ¹, t_(p) ¹].

[0125] The temperature deviation program 111 then iteratively performs in sub-steps 197 to 204 of step 145 a simulation of the cooling phase. Steps 197 to 201 are performed in each iteration of the cooling phase simulation. And, steps 197 to 204 are respectively the same as steps 163 to 170 of FIG. 9 and discussed in section 2.b., except for some differences discussed next.

[0126] In steps 198 and 199 of each iteration, the portion of the product cold spot time-temperature profile T_(CS)(t)¹ predicted to occur over the current simulation time increment [t_(s)−Δt_(r), t_(s)] and a predicted product cold spot temperature T_(CS)(t_(s)−Δt_(r))¹ at the previous simulation sampling time t_(s)−Δt_(r) are simulated and used. Furthermore, a cooling lethality F⁰ predicted to be delivered over the current simulation time increment [t_(s)−Δt_(r), t_(s)] is computed and used in steps 199 and 200 of each iteration. Furthermore, predicted lethalities F⁰ over [t_(s)−Δt_(r), t_(s)], F⁰ over [t₀, t_(s)], and F⁰ over [t₀, t_(s)−Δt_(r)] are computed and used in steps 198 to 200 of each iteration.

[0127] After step 201 of the last iteration, the temperature deviation program 111 will proceed to step 203 if it determines in step 202 that the total lethality F⁰ predicted over the current simulation time interval [t₀, t_(s)] does satisfy the target total lethality F_(targtot). Then, in step 203, the program defines the cooling portion of the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ over the re-scheduled cooling time interval [t_(p) ¹, t_(c) ¹].

[0128] However, the temperature deviation program 111 will proceed to step 204 if it determines in step 202 that the predicted total lethality F⁰ over [t₀, t_(s)] does not satisfy the target total lethality F_(targtot). In this case, the program re-sets in step 204 the current simulation sampling time t_(s) to the re-scheduled processing end time t_(p) ¹ defined in step 195. The program 111 also re-sets in step 204 the lethality F¹ over [t₀, t_(s)] to the predicted heating lethality F¹ over [t₀, t_(p) ¹] defined in step 195. And, the program re-sets in step 204 the product cold spot temperature T_(CS)(t_(s))¹ to the product cold spot temperature T_(CS)(t_(p) ¹)¹ defined step 195. Then, the steps 191 to 204 are repeated until the program re-defines the remaining processing portion of the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ in step 196 and defines the cooling portion of the profile T_(cRT)(t)¹ in step 203.

[0129] 3. Alternative Embodiments

[0130] As indicated earlier, the embodiment of controller 104 associated with FIGS. 6 to 12 and described in section 2 is only an exemplary embodiment. Alternative embodiments that utilize the principles and concepts developed in FIGS. 6 to 12 and section 2 do exist.

[0131] 3.a. Scheduled Processing End Time t_(p) ⁰ Kept Constant

[0132] For example, in one embodiment, the scheduled processing end time t_(p) ⁰ kept constant, as shown in FIG. 13. Thus, in this embodiment, the processing retort temperature T_(pRT) ^(n) scheduled in response to the nth temperature deviation will be re-scheduled whenever the (n+1)th temperature deviation occurs while the scheduled remaining processing time interval [t_(e) ¹, t_(p) ⁰] is kept the same.

[0133] More specifically, the remaining processing portion of the re-scheduled remaining time-temperature profile T_(pRT)(t)¹ will be defined as a constant re-scheduled remaining processing retort temperature T_(pRT) ¹ over the time interval [t_(e) ¹, t_(p) ⁰] for the first temperature deviation. The process control program 109 detects the first temperature deviation when the actual retort temperature T_(aRT)(t_(d) ¹) at the deviation begin time t_(d) ¹ is below the scheduled processing retort temperature T_(pRT) ⁰. Similar to step 138 of FIG. 6, the program 109 will cause the control circuitry 117 to administer a temperature deviation correction at each real sampling time t_(r) during the deviation. However, in this case, the actual retort time-temperature profile T_(aRT)(t_(r)) is brought up until the deviation is cleared between the profile T_(aRT)(t_(r)) and the remaining processing portion of the profile T_(pRT)(t)¹. This occurs when the actual retort temperature T_(aRT)(t_(e)) at the deviation end time t_(e) ¹ is at least equal to the temperature T_(pRT) ¹.

[0134] In order to define the re-scheduled remaining processing retort temperature T_(pRT) ¹, the temperature deviation program 111 computes at each time t_(r) during the temperature deviation the heating lethality F¹ predicted to be delivered over the scheduled heating time interval [t₀, t_(p) ⁰]. This is the sum of the heating lethality F¹ actually delivered over the expired real time interval [t₀, t_(r)] and the heating lethality F¹ predicted to be delivered over the scheduled remaining processing time interval [t_(r), t_(p) ⁰]. Moreover, this computation is made by simulating the processing phase over the time interval [t₀, t_(p) ⁰] in a similar manner to that described earlier for the time interval [t₀, t_(p) ¹] in step 145 of FIG. 6. However, here, the lethality F¹ predicted over the time interval [t_(r), t_(p) ⁰] is computed based on the portion of the product cold spot time-temperature profile T_(CS)(t)¹ that is predicted over the time interval [t_(r), t_(p) ⁰]. This simulation is performed by setting the temperature T_(pRT) ¹ to the actual retort temperature T_(aRT)(t_(r)) at the time t_(r).

[0135] The computation just described is repeated at each real sampling time t_(r) after the deviation begin time t_(d) ¹ until the heating lethality F¹ predicted to be delivered over the time interval [t₀, t_(p) ⁰] does satisfy the target heating lethality F_(targh). When this finally occurs, the program 111 computes the total lethality F¹ predicted to be delivered over the re-scheduled total time interval [t₀, t_(c) ¹]. Here, the lpredicted total ethality F¹ over [t₀, t_(c) ¹] will be the sum of the predicted heating lethality F¹ over [t₀, t_(p) ⁰] and a cooling lethality F¹ predicted to be delivered over a re-scheduled cooling time interval [t_(p) ⁰, t_(c) ¹]. This computation is made by simulating the cooling phase over the time interval [t_(p) ⁰, t_(c) ¹] in a similar manner to that described earlier for step 145 of FIG. 6. Here, however, the cooling time-temperature gradient T_(cRT)(t) will be shifted to start at the re-scheduled remaining processing retort temperature T_(pRT) ¹. As a result, the portion of the product cold spot time-temperature profile T_(CS)(t)¹ predicted to occur over the time interval [t_(p) ⁰, t_(c) ¹] will be based on the portion of the gradient T_(cRT)(t) that is between the temperature T_(pRT) ¹ and the ending retort temperature T_(eRT) over the time interval [t_(p) ⁰, t_(c) ¹].

[0136] If the predicted total lethality F¹ over [t₀, t_(c) ¹] satisfies the target total lethality F_(targtot), then the temperature deviation is cleared. But, if it does not, then the temperature deviation program 111 repeats the entire process just described for the next real sampling time t_(r)+Δt_(r) until the target total lethality F_(targtot) is finally satisfied and the deviation is cleared. When this occurs, the program defines the remaining processing portion of the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ as the re-scheduled remaining processing retort temperature T_(pRT) ¹ over the scheduled remaining processing time interval [t_(e) ¹, t_(p) ⁰]. Similarly, the program defines the cooling portion of the re-scheduled remaining time-temperature profile T_(sRT)(t)¹ as the portion of the gradient T_(cRT)(t) between the temperature T_(pRT) ¹ and the scheduled ending retort temperature T_(eRT) over the re-scheduled cooling time interval [t_(p) ⁰, t_(c) ¹].

[0137] Referring to FIG. 8, it is also possible in this embodiment that the processing phase will actually end at a current real sampling time t_(r) while the temperature deviation is still occurring. In this case, the re-scheduled remaining time-temperature profile T_(cRT)(t)¹ is defined in the same manner as was described earlier for step 147 of FIG. 6.

[0138] The flow diagrams in FIGS. 6 and 9 to 12 and described in section 2 would of course have to be adjusted according to the foregoing discussion. However, the manner in which this is done will be obvious to those skilled in the art.

[0139] 3.b. Re-Scheduled Remaining Processing Retort Temperature T_(pRT) ¹ and End Time t_(p) ¹

[0140] As a variation of the embodiment just described, the remaining processing portion of the re-scheduled remaining time-temperature profile T_(pRT)(t)¹ may comprise a re-scheduled remaining processing retort temperature T_(pRT) ¹ over a re-scheduled remaining processing time interval [t_(e) ¹, t_(p) ¹]. This embodiment would therefore be a combination of the two previous embodiments described. In this way, both a re-scheduled processing end time t_(p) ¹ and a re-scheduled remaining processing retort temperature T_(pRT) ¹ may be defined when the first temperature deviation occurs. The same would be true for any subsequent deviations.

[0141] 3.c. Handling Temperature Deviation in Come-Up Phase

[0142] It is possible that a temperature deviation will occur during the come-up phase between the actual retort time-temperature profile T_(aRT)(t) and the come-up portion of the scheduled total time-temperature profile T_(sRT)(t)⁰. There are numerous well known techniques for handling such a temperature deviation. However, as those skilled in the art will recognize, the technique disclosed herein for handling a temperature deviation during the processing phase may be used in another embodiment of the controller 104 for also handling a temperature deviation in the come-up phase.

[0143] 3.d. Using Portion of Actual Retort Time-Temperature Profile T_(aRT)(t)

[0144] In step 139 of the embodiment described in section 2, the portion of the product cold spot time-temperature profile T_(CS)(t)¹ that actually occurs over the expired real time interval [t₀, t_(r)] is based on the actual retort time-temperature profile T_(aRT)(t) over this same time interval. However, a more conservative embodiment could be used. For example, the portion of the profile T_(CS)(t)¹ over the time interval [t₀, t_(d) ¹) may be based on the potion of the scheduled total time-temperature profile T_(sRT)(t) over the scheduled time interval [t₀, t_(d) ¹) before the deviation began. Then, the portion of the profile T_(CS)(t)¹ over the time interval [t_(d) ¹, t_(r)] may be based on the portion of the profile T_(aRT)(t) over this same time interval.

[0145] This means that the portion of the re-scheduled product cold spot time-temperature profile T_(CS)(t)¹ over the deviation time interval [t_(d) ¹, t_(e) ¹) will be based on the portion of the profile T_(aRT)(t) over the same time interval. The remaining portion of the profile T_(CS)(t)¹ over the re-scheduled remaining time interval (t_(e) ¹, t_(c) ¹] will be simulated in the manner discussed earlier for step 145.

[0146] 3.e. Without Heating Target Lethality F_(targh)

[0147] As mentioned earlier, the target heating lethality F_(targh) may be an optional requirement in the batch sterilization system 100. Thus, in another embodiment, only the target total lethality F_(targtot) would be used and the flow diagrams in FIGS. 6 and 9 to 12 would have to be adjusted accordingly.

[0148] 3.f. Temperature Gradients in Processing and Remaining Processing Portions of Scheduled Total and Re-scheduled Remaining Time-Temperature Profiles T_(sRT)(t)⁰ and T_(sRT)(t)¹

[0149] Finally, the scheduled total and re-scheduled remaining time-temperature profiles T_(sRT)(t)⁰ and T_(sRT)(t)¹ were defined in steps 127 and 145 with scheduled and re-scheduled remaining processing retort temperatures T_(pRT)(t)⁰ and T_(pRT)(t)¹ that are constant over the scheduled and re-scheduled remaining processing time intervals [t_(u) ⁰, t_(d) ⁰] and [t_(e) ¹, t_(d) ¹], respectively. However, as those skilled in the art will recognize, the profiles T_(sRT)(t)⁰ and T_(sRT)(t)¹ may also be defined in such a way that they are not constant over the time intervals [t_(u) ⁰, t_(d) ⁰] and [t_(e) ¹, t_(d) ¹]. In other words, the profiles T_(sRT)(t)¹ and T_(sRT)(t)¹ may be defined in such a way that their respective processing and remaining processing portions have temperature gradients over the time intervals [t_(u) ⁰, t_(d) ⁰] and [t_(e) ¹, t_(d) ¹] like their come-up and cooling portions.

[0150] 4. Conclusion

[0151] Referring to FIGS. 7 and 13, it is important to note that the portion of the product cold spot time-temperature profile T_(CS)(t)¹ that actually occurs over the time interval [t₀, t_(e) ¹) is based on at least the portion of the actual retort time-temperature profile T_(aRT)(t) that occurs over the deviation time interval [t_(d) ¹, t_(e) ¹). This means that full credit is given to the heating lethality F¹ that is actually delivered over this time interval [t₀, t_(e) ¹) to the batch 101. As a result, the re-scheduled heating time interval [t₀, t_(p) ¹] will not be overly conservative and the food product in the batch will not be over processed.

[0152] While the present invention has been described with reference to a few specific embodiments, the description is illustrative of the invention and is not to be construed as limiting the invention. Various modifications may occur to those skilled in the art without departing from the true spirit and scope of the invention as defined by the appended claims. 

What is claimed is:
 1. A batch sterilization system comprising: a batch sterilizer to perform a batch sterilization process on a batch of containers; a sensor to sense actual retort temperatures in the batch sterilizer during the batch sterilization process; and a controller to: compile an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures sensed by the sensor; until a temperature deviation between the actual retort time-temperature profile and a scheduled time-temperature profile has begun, control the batch sterilizer so as to administer an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile; in response to the temperature deviation, define a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation has cleared by simulating the batch sterilization process based on the actual retort time-temperature profile; during the temperature deviation, control the batch sterilizer so as to administer corrections to clear the temperature deviation between the actual retort and re-scheduled remaining processing time-temperature profiles; when the temperature deviation has cleared, administer the remaining portion of the batch sterilization process according to the re-scheduled remaining time-temperature profile.
 2. The batch sterilization system of claim 1 wherein the temperature deviation occurs during a processing phase of the batch sterilization process.
 3. The batch sterilization system of claim 1 wherein the temperature deviation occurs during a come-up phase of the batch sterilization process.
 4. The batch sterilization system of claim 2 wherein the controller defines the re-scheduled remaining time-temperature profile by: computing a total lethality predicted to be delivered to the product cold spot over the batch sterilization process that (a) is based on the product cold spot time-temperature profile, and (b) satisfies a target lethality to be delivered to the product cold spot; simulating the product cold spot time-temperature profile based on the actual retort temperature profile and the re-scheduled remaining time-temperature profile.
 5. The batch sterilization system of claim 3 wherein the controller uses a finite difference simulation model to simulate the product cold spot time-temperature profile.
 6. The batch sterilization system of claim 3 wherein the total lethality is the sum of (a) a lethality actually delivered over a first time interval from when the batch sterilization process begins to when the temperature deviation clears, and (b) a lethality predicted to be delivered over a second time interval from when the temperature deviation clears to when the batch sterilization process is predicted to end.
 7. The batch sterilization system of claim 6 wherein: the lethality actually delivered over the first time interval is based on the portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over a time interval from when the temperature deviation begins to when the temperature deviation clears.
 8. The batch sterilization system of claim 6 wherein: the heating lethality actually delivered over the first time interval is based on a portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over the first time interval.
 9. A method of administering and providing on-line correction of a batch sterilization process performed on a batch of containers, the method comprising the steps of: compiling an actual retort time-temperature profile during the batch sterilization process from actual retort temperatures sensed during the batch sterilization process; until a temperature deviation between the actual retort temperature profile and a scheduled time-temperature profile has begun, administering an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile; in response to the temperature deviation, defining a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation has cleared by simulating the batch sterilization process based on the actual retort time-temperature profile; during the temperature deviation, administering corrections so that the temperature deviation will be cleared between the actual retort and re-scheduled remaining time-temperature profiles; when the temperature deviation has cleared, administering the remaining portion of the batch sterilization process according to the re-scheduled remaining time-temperature profile.
 10. The method of claim 9 wherein the temperature deviation occurs during a processing phase of the batch sterilization process.
 11. The method of claim 9 wherein the temperature deviation occurs during a come-up phase of the batch sterilization process.
 12. The method of claim 9 wherein the step of defining the re-scheduled remaining time-temperature profile comprises the steps of: computing a total lethality predicted to be delivered to the product cold spot over the batch sterilization process that (a) is based on a product cold spot time-temperature profile, and (b) satisfies a target lethality to be delivered to the product cold spot; and simulating the product cold spot time-temperature profile based on the actual retort temperature profile and the re-scheduled remaining time-temperature profile.
 13. The method of claim 12 wherein a finite difference simulation model is used in the step of simulating the product cold spot time-temperature profile.
 14. The method of claim 12 wherein the total lethality is the sum of (a) a lethality actually delivered over a first time interval from when the batch sterilization process begins to when the temperature deviation clears, and (b) a lethality predicted to be delivered over a second time interval from when the temperature deviation clears to when the batch sterilization process is predicted to end.
 15. The method of claim 14 wherein: the lethality actually delivered over the first time interval is based on the portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over a time interval from when the temperature deviation begins to when the temperature deviation clears.
 16. The method of claim 14 wherein: the heating lethality actually delivered over the first time interval is based on a portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over the first time interval.
 17. A controller for use in a batch sterilization system, the batch sterilization system including a batch sterilizer to perform a batch sterilization process on a batch of containers and a sensor to sense actual retort temperatures in the batch sterilizer during the batch sterilization process, the controller comprising: control circuitry to administer the batch sterilization process by controlling the batch sterilizer and measure the actual retort temperatures sensed by the sensor; a memory to store a process control program and a temperature deviation program; and a microprocessor coupled to the control circuitry and the memory to execute the process control and temperature deviation programs such that: the process control program: compiles an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures measured by the control circuitry; until a temperature deviation between the actual retort time-temperature and a scheduled time-temperature profile has begun, causes the control circuitry to administer an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile; during the temperature deviation, causes the control circuitry to administer corrections to clear the temperature deviation between the actual retort time-temperature profile and a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation has cleared; and when the temperature deviation has cleared, causes the control circuitry to administer the remaining portion of the batch sterilization process according to the re-scheduled remaining time-temperature profile; and the temperature deviation program, in response to the temperature deviation, defines the re-scheduled remaining time-temperature profile by simulating the batch sterilization process based on the actual retort time-temperature profile.
 18. The controller of claim 17 wherein the temperature deviation occurs during a processing phase of the batch sterilization process.
 19. The controller of claim 17 wherein the temperature deviation occurs during a come-up phase of the batch sterilization process.
 20. The controller of claim 17 wherein the temperature deviation program defines the re-scheduled remaining time-temperature profile by: computing a total lethality predicted to be delivered to the product cold spot over the batch sterilization process that (a) is based on the product cold spot time-temperature profile, and (b) satisfies a target lethality to be delivered to the product cold spot; simulating the product cold spot time-temperature profile based on the actual retort temperature profile and the re-scheduled remaining time-temperature profile.
 21. The controller of claim 20 wherein the temperature deviation program uses a finite difference simulation model to simulate the product cold spot time-temperature profile.
 22. The controller of claim 21 wherein the total lethality is the sum of (a) a lethality actually delivered over a first time interval from when the batch sterilization process begins to when the temperature deviation clears, and (b) a lethality predicted to be delivered over a second time interval from when the temperature deviation clears to when the batch sterilization process is predicted to end.
 23. The controller of claim 22 wherein: the lethality actually delivered over the first time interval is based on the portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over a time interval from when the temperature deviation begins to when the temperature deviation clears.
 24. The controller of claim 22 wherein: the lethality actually delivered over the first time interval is based on a portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over the first time interval. 